Defensive Security Analyst

The role

You will run and own the infrastructure and automation that detect, contain and remove security threats. You will manage SOC systems, build detection strategies, and support incident response and digital forensics across Palantir's people and infrastructure worldwide.

What you will do

• Build, run and own infrastructure and automation to detect, contain and eradicate security threats
• Develop alerting and detection strategies to identify malicious or anomalous behavior
• Develop reports and presentations for technical and executive audiences
• Develop new defensive techniques to counter changes in adversary tactics
• Dissect network, host, memory and other artifacts from multiple operating systems and applications
• Perform enterprise-wide operations to uncover sophisticated, undetected threats
• Partner with the Information Security team to lead changes in network defense posture
• Support incident response and digital forensics, including log, memory and disk image capture and preservation
• Conduct host and network forensics, log analysis and malware triage for hunt operations
• Interface with client contacts and staff in a professional manner

Required qualifications

• TS/SCI Clearance
• Established experience operating in a SOC environment, through relevant experience or qualifications
• Experience with programming or scripting languages such as PowerShell, Python and Bash
• Willingness and ability to commute to the Georgetown office within one hour when on-call

Nice to have

• Knowledge of operating and maintaining a SIEM
• Knowledge of cloud architectures, particularly AWS
• Experience in penetration testing
• Ability to quickly learn new technologies and stay current
• Ability to train others on forensic and incident response tools and techniques

Benefits

• Medical, dental and vision insurance, plus voluntary life insurance
• Basic life, AD&D and disability insurance, automatically covered
• Commuter benefits
• Relocation assistance
• Flexible paid time off, not accrual based
• 2 weeks paid time off at the end of each year (subject to team and business needs)
• 10 paid holidays per calendar year
• Leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses with a new child
• 401k plan

Before you apply

• Requires TS/SCI clearance
• Must be able to commute to the Georgetown office within one hour when on-call
• Some roles allow remote work only on an exceptional basis and require working from the state of employment; the posting does not say whether this role does
• Palantir will never ask for payment or financial information during interviews

About the company

Palantir builds software for data-driven decisions and operations, used by partners to develop drugs, forecast supply chain disruptions and locate missing children. It is an Equal Opportunity Employer that offers reasonable accommodations in its hiring process.